2025 CVE Vulnerabilities
45,233 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-10823 | LOW | 3.3 | 0.1% | Sep 23, 2025 | A vulnerability was found in axboe fio up to 3.41. This affects the function str_buffer_pattern_cb of the file options.c... |
| CVE-2025-10822 | MEDIUM | 4.3 | 0.3% | Sep 23, 2025 | A vulnerability has been found in fuyang_lipengjun platform 1.0. The impacted element is the function SysSmsLogControlle... |
| CVE-2025-43814 | MEDIUM | 6.5 | 0.3% | Sep 22, 2025 | In Liferay Portal 7.4.0 through 7.4.3.112, and older unsupported versions, and Liferay DXP 2023.Q4.0 through 2023.Q4.8, ... |
| CVE-2025-43810 | MEDIUM | 4.3 | 0.3% | Sep 22, 2025 | Insecure Direct Object Reference (IDOR) vulnerability with commerce order notes in Liferay Portal 7.3.5 through 7.4.3.11... |
| CVE-2025-10821 | MEDIUM | 4.3 | 0.3% | Sep 22, 2025 | A flaw has been found in fuyang_lipengjun platform 1.0. The affected element is the function TopicCategoryController of ... |
| CVE-2025-10820 | MEDIUM | 4.3 | 0.3% | Sep 22, 2025 | A vulnerability was detected in fuyang_lipengjun platform 1.0. Impacted is the function TopicController of the file /top... |
| CVE-2025-10819 | MEDIUM | 4.3 | 0.3% | Sep 22, 2025 | A security vulnerability has been detected in fuyang_lipengjun platform 1.0. This issue affects the function UserCouponC... |
| CVE-2025-43806 | MEDIUM | 4.3 | 0.2% | Sep 22, 2025 | Batch Engine in Liferay Portal 7.4.0 through 7.4.3.112, and Liferay DXP 2023.Q4.0 through 2023.Q4.7, 2023.Q3.1 through 2... |
| CVE-2025-10817 | CRITICAL | 9.8 | 0.4% | Sep 22, 2025 | A weakness has been identified in Campcodes Online Learning Management System 1.0. This vulnerability affects unknown co... |
| CVE-2025-10816 | CRITICAL | 9.8 | 0.5% | Sep 22, 2025 | A security flaw has been discovered in Jinher OA 2.0. This affects an unknown part of the file /c6/Jhsoft.Web.module/Too... |
| CVE-2025-59535 | MEDIUM | 6.5 | 0.3% | Sep 22, 2025 | DNN (formerly DotNetNuke) is an open-source web content management platform (CMS) in the Microsoft ecosystem. Prior to v... |
| CVE-2025-59532 | HIGH | 8.6 | 0.8% | Sep 22, 2025 | Codex CLI is a coding agent from OpenAI that runs locally. In versions 0.2.0 to 0.38.0, due to a bug in the sandbox conf... |
| CVE-2025-57205 | MEDIUM | 5.4 | 0.2% | Sep 22, 2025 | iNiLabs School Express (SMS Express) 6.2 is affected by a Stored Cross-Site Scripting (XSS) vulnerability in the content... |
| CVE-2025-57204 | MEDIUM | 5.4 | 0.2% | Sep 22, 2025 | Stocky POS with Inventory Management & HRM (ui-lib) version 5.0 is affected by a Stored Cross-Site Scripting (XSS) vulne... |
| CVE-2025-47910 | MEDIUM | 5.4 | 0.3% | Sep 22, 2025 | When using http.CrossOriginProtection, the AddInsecureBypassPattern method can unexpectedly bypass more requests than in... |
| CVE-2025-10815 | HIGH | 8.8 | 0.8% | Sep 22, 2025 | A vulnerability was identified in Tenda AC20 up to 16.03.08.12. Affected by this issue is the function strcpy of the fil... |
| CVE-2025-10814 | HIGH | 8.8 | 6.1% | Sep 22, 2025 | A vulnerability was determined in D-Link DIR-823X 240126/240802/250416. Affected by this vulnerability is an unknown fun... |
| CVE-2025-59528 | CRITICAL | 10 | 90.2% | Sep 22, 2025 | Flowise is a drag & drop user interface to build a customized large language model flow. In version 3.0.5, Flowise is vu... |
| CVE-2025-59527 | HIGH | 7.5 | 4.6% | Sep 22, 2025 | Flowise is a drag & drop user interface to build a customized large language model flow. In version 3.0.5, a Server-Side... |
| CVE-2025-59526 | LOW | 2.7 | 0.4% | Sep 22, 2025 | mailgen is a Node.js package that generates responsive HTML e-mails for sending transactional mail. Prior to version 2.0... |
| CVE-2025-59434 | CRITICAL | 9.6 | 3.1% | Sep 22, 2025 | Flowise is a drag & drop user interface to build a customized large language model flow. Prior to August 2025 Cloud-Host... |
| CVE-2025-59433 | MEDIUM | 5.3 | 0.2% | Sep 22, 2025 | Conventional Changelog generates changelogs and release notes from a project's commit messages and metadata. Prior to ve... |
| CVE-2025-59432 | MEDIUM | 6.6 | 0.8% | Sep 22, 2025 | SCRAM (Salted Challenge Response Authentication Mechanism) is part of the family of Simple Authentication and Security L... |
| CVE-2025-57203 | MEDIUM | 4.8 | 0.2% | Sep 22, 2025 | MagicProject AI version 9.1 is affected by a Cross-Site Scripting (XSS) vulnerability within the chatbot generation feat... |
| CVE-2025-10813 | CRITICAL | 9.8 | 0.4% | Sep 22, 2025 | A vulnerability was found in code-projects Hostel Management System 1.0. Affected is an unknown function of the file /ju... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now